Five Cyber Awareness actions MSPs can run with every client this month

Cyber Awareness Month is useful when it changes the book of business — not when it produces another poster. Here are five actions sized for MSPs who already live in client environments.

1. Vendor one-pager in motion

For each priority client, name five vendors that would hurt most and run the short questionnaire spine. Evidence next to yes.

2. Remote-access verify

Version, console MFA, session/file-transfer review, dated proof — especially after KEV cues like ScreenConnect. Habit, not panic.

3. Shadow AI ask

Which AI tools (including personal accounts) touched client or customer data recently? Tool, data class, owner, review date.

4. Living risk picture stub

Assets, top risks, owners, last review — one page. The foundation that makes SOC 2 and insurer packets survivable.

5. Questionnaire reuse pack

Update the MSP playbook so the next security or cyber-insurance form is a map-and-attach job, not a rewrite.

Free Risk Snapshot (through Oct 31)

Use the Snapshot as a lightweight client conversation starter: https://scarletrisk.com/risk-snapshot — through October 31 only. One page, three next moves, emailed after a short intake.

Want to map these five actions to your own client list? Grab time with Pete: https://calendly.com/pete-scarletrisk/30min.